Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,807 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-47865 |
critical | 9.8 | 0.0061 | 2026-07-18 | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with netw | |
CVE-2026-63808 |
critical | 9.8 | 0.0053 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after- | |
CVE-2026-63886 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate C | |
CVE-2026-63887 |
critical | 9.8 | 0.0078 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscs | |
CVE-2026-63888 |
critical | 9.8 | 0.0078 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC ov | |
CVE-2026-63922 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after | |
CVE-2026-63924 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh point | |
CVE-2026-16235 |
critical | 9.8 | 0.0055 | 2026-07-20 | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These ver | |
CVE-2026-53405 |
critical | 9.8 | 0.0075 | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with a | |
CVE-2026-53421 |
critical | 9.8 | 0.0114 | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with | |
CVE-2026-57308 |
critical | 9.8 | 0.0083 | 2026-07-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-62183 |
critical | 9.8 | 0.0069 | 2026-07-20 | Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow | |
CVE-2026-63071 |
critical | 9.8 | 0.0075 | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with a | |
CVE-2026-41252 |
critical | 9.8 | 0.0111 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, | |
CVE-2026-12341 |
critical | 9.8 | 0.0040 | 2026-07-20 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unautho | |
CVE-2026-64193 |
critical | 9.8 | 0.0144 | 2026-07-20 | Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. N | |
CVE-2024-51311 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of | |
CVE-2024-51313 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of | |
CVE-2024-51312 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of | |
CVE-2024-51314 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of | |
CVE-2024-51315 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of | |
CVE-2026-52656 |
critical | 9.8 | 0.0073 | 2026-07-20 | An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C an | |
CVE-2026-64608 |
critical | 9.8 | 0.0081 | 2026-07-21 | Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deseria | |
CVE-2026-64606 |
critical | 9.8 | 0.0078 | 2026-07-21 | Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypas | |
CVE-2026-1617 |
critical | 9.8 | 0.0047 | 2026-07-21 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i | |
CVE-2026-16349 |
critical | 9.8 | 0.0030 | 2026-07-21 | Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox | |
CVE-2026-16350 |
critical | 9.8 | 0.0060 | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in F | |
CVE-2026-16351 |
critical | 9.8 | 0.0058 | 2026-07-21 | Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed | |
CVE-2026-16352 |
critical | 9.8 | 0.0058 | 2026-07-21 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was | |
CVE-2026-16353 |
critical | 9.8 | 0.0060 | 2026-07-21 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16355 |
critical | 9.8 | 0.0060 | 2026-07-21 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox | |
CVE-2026-16356 |
critical | 9.8 | 0.0058 | 2026-07-21 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was | |
CVE-2026-16357 |
critical | 9.8 | 0.0060 | 2026-07-21 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16358 |
critical | 9.8 | 0.0030 | 2026-07-21 | Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-16360 |
critical | 9.8 | 0.0061 | 2026-07-21 | Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed | |
CVE-2026-16361 |
critical | 9.8 | 0.0057 | 2026-07-21 | Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory c | |
CVE-2026-16363 |
critical | 9.8 | 0.0064 | 2026-07-21 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox | |
CVE-2026-16368 |
critical | 9.8 | 0.0057 | 2026-07-21 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed | |
CVE-2026-16369 |
critical | 9.8 | 0.0064 | 2026-07-21 | Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-16375 |
critical | 9.8 | 0.0029 | 2026-07-21 | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, | |
CVE-2026-16377 |
critical | 9.8 | 0.0057 | 2026-07-21 | Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox | |
CVE-2026-16382 |
critical | 9.8 | 0.0056 | 2026-07-21 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16383 |
critical | 9.8 | 0.0057 | 2026-07-21 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Fir | |
CVE-2026-16387 |
critical | 9.8 | 0.0028 | 2026-07-21 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firef | |
CVE-2026-16388 |
critical | 9.8 | 0.0055 | 2026-07-21 | Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thu | |
CVE-2026-16389 |
critical | 9.8 | 0.0064 | 2026-07-21 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerabilit | |
CVE-2026-16395 |
critical | 9.8 | 0.0062 | 2026-07-21 | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thund | |
CVE-2026-16402 |
critical | 9.8 | 0.0062 | 2026-07-21 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 an | |
CVE-2026-16407 |
critical | 9.8 | 0.0051 | 2026-07-21 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16408 |
critical | 9.8 | 0.0062 | 2026-07-21 | Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 |